Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa
File:                     dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa (raw, json)
Hash identifier:          nwb/kxn7Zy7hQL3DvOnnihEVlgoID+inlcOf9WKEXHw=
Subject key identifier:   50:92:ED:E3:DB:99:4E:1B:05:7A:A3:7B:68:2E:42:51:3D:00:F8:A5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47CADC2C390264AD17CAE0E6D287AC812DBCCB3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa
Signing time:             Tue 21 Jul 2026 00:50:47 +0000
ROA not before:           Tue 21 Jul 2026 00:50:47 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.141.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:dc:2c:39:02:64:ad:17:ca:e0:e6:d2:87:ac:81:2d:bc:cb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:50:47 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=1192b3b4ba64aebec74fdf83b742d35ce9b40b4a54e2e91503a6c375fcb8c336, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:0a:f8:4b:df:c3:fc:3c:03:48:80:26:85:
                    78:cb:5f:fe:82:5c:3f:e0:df:16:dd:47:fc:d9:d8:
                    c6:c8:99:bd:82:3f:75:f4:34:e0:8c:a5:74:20:a5:
                    24:12:b2:bc:9f:ef:96:84:d0:cf:8f:87:66:12:47:
                    a5:08:bb:2a:bb:30:fd:6c:f1:0a:01:a7:18:12:01:
                    c8:24:5d:e0:3b:b4:14:a5:fd:28:3c:53:fc:f4:da:
                    80:ce:f7:b1:7d:35:3c:d1:b4:1a:36:ca:28:5e:ca:
                    ef:e2:04:f0:9d:9c:13:62:ce:49:da:c5:fa:29:68:
                    b0:98:f1:d4:a4:6f:4e:f2:9d:86:12:85:4e:65:b9:
                    98:9b:18:74:a9:e0:85:66:aa:d8:b0:b0:4d:50:d3:
                    d4:1d:b3:6b:56:3e:62:a0:b4:23:51:44:16:76:7f:
                    2a:ab:9e:f1:3a:91:1e:78:ce:7f:73:e0:5d:b0:db:
                    84:a2:03:f3:20:e3:a4:e9:62:11:c5:8c:fc:d3:8f:
                    f4:c6:f4:03:78:2a:e6:3a:66:93:0a:24:bb:26:a4:
                    1c:22:36:1e:f3:0e:e0:3c:83:67:50:00:66:82:3c:
                    b9:6c:73:92:b4:f3:3d:b4:0a:d9:82:90:cb:f2:54:
                    43:42:7a:93:eb:b9:9a:72:3d:25:2d:94:c0:7f:c4:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:92:ED:E3:DB:99:4E:1B:05:7A:A3:7B:68:2E:42:51:3D:00:F8:A5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:8d:9f:df:02:1f:bd:2e:fd:6f:9c:cc:9d:7d:d2:1a:19:af:
         47:f4:e3:c0:5a:96:98:95:ef:b7:a1:7e:5b:8e:52:ff:17:4f:
         6d:29:9c:56:e7:26:4b:dc:83:f3:c3:4f:fa:8c:51:19:9e:23:
         31:03:6e:4b:a1:66:4e:70:b9:e0:d5:a7:7d:b6:8e:9c:c3:bc:
         27:c0:35:ef:bd:30:66:2d:f3:5e:6c:25:77:c4:de:fb:9b:6e:
         ef:d4:78:35:80:6b:27:a2:fc:14:6f:55:e3:72:f2:3a:d1:bd:
         da:5f:9a:59:38:4c:63:a7:8c:cc:4e:86:04:98:e0:da:54:8c:
         d2:e3:96:23:fc:99:59:95:8c:6c:a2:35:c6:47:24:df:a3:bf:
         8d:13:18:2b:d1:56:ef:67:e8:f9:31:f8:a0:24:fb:b2:44:2e:
         a6:3e:d8:3f:3b:4b:bc:b9:90:08:d2:99:cc:43:f4:ad:68:39:
         00:49:f9:87:df:9e:47:b4:67:f2:1c:2f:91:f0:7e:94:aa:7d:
         73:be:a6:fd:95:a8:dc:ce:a2:38:39:2b:d6:82:7b:d7:85:96:
         94:1b:82:87:3a:e2:25:99:75:54:87:ed:c3:8f:7b:ff:83:3b:
         bb:7f:27:25:5f:72:03:18:5d:89:57:33:53:a7:8f:40:3e:f9:
         6e:96:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:17 2026 by rpki-client